$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft File: kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft (raw, json) Hash identifier: /BDse29M3PHYhlYoA4FNcwhlJ9R0tk4YKvNgZH/rEfI= Subject key identifier: B7:CA:B0:E6:47:B2:A7:C5:7B:90:17:71:24:BD:21:41:73:E6:8E:B0 Authority key identifier: 90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4 Certificate issuer: /CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft Manifest number: 011E Signing time: Tue 09 Sep 2025 04:53:08 +0000 Manifest this update: Tue 09 Sep 2025 04:53:07 +0000 Manifest next update: Tue 16 Sep 2025 04:53:07 +0000 Files and hashes: 1: kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl (hash: Fl931csKfLx+sAc4HL/DGfhTIt6T7Evurt1kC5toZcA=) 2: F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa (hash: d6abLKyd7fr1z0R2GJ3OwWkvRu3wB2ZUv3mxpyp6whI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 04:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167A72, serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4 Validity Not Before: Sep 9 04:53:07 2025 GMT Not After : Sep 16 04:53:07 2025 GMT Subject: CN=68bfb2b3-5993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fc:ff:ca:e1:5d:63:49:b6:af:6a:ca:98:87: 0e:83:5d:fa:b6:85:a4:d5:86:1d:de:82:89:4b:5d: 71:e1:f7:c5:3d:f9:63:f4:9a:25:e1:6a:1a:df:d1: 11:98:c1:1c:62:82:de:72:45:04:5d:9c:0a:6b:9b: aa:9a:ea:ec:32:99:7e:d7:be:54:25:18:6e:cc:7c: fc:9b:81:d8:44:c3:e2:55:aa:cb:14:4d:e8:ff:c7: f7:24:07:aa:dd:e9:8f:a2:68:ff:68:ce:90:ee:3a: 6d:c6:94:af:86:39:a0:71:c7:38:99:29:22:c4:f0: 99:e1:01:c9:0b:35:bb:84:7c:50:bd:16:97:6b:4d: 16:ef:a3:20:fb:67:92:30:2b:c5:1d:e1:46:25:d6: b1:40:cc:95:8b:43:70:95:85:61:06:5a:5d:19:cb: f6:99:ee:8f:7d:5b:a4:ad:57:28:b1:c9:36:43:0e: de:79:48:88:87:0a:36:6c:fa:fd:35:ff:96:05:fe: 21:25:39:34:b3:7e:76:ef:54:11:1f:98:4d:1e:b1: 12:0a:90:a9:fa:b0:32:33:e1:b7:cf:a6:86:f6:1a: 9f:de:62:55:e3:83:aa:13:da:17:7f:4c:6f:57:6e: 25:2e:0b:53:9c:3d:51:40:21:1b:71:a8:53:7b:92: a4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CA:B0:E6:47:B2:A7:C5:7B:90:17:71:24:BD:21:41:73:E6:8E:B0 X509v3 Authority Key Identifier: keyid:90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:86:05:76:ff:59:10:04:70:dc:e8:cc:74:95:a6:a9:fa:01: 5c:46:d5:7f:6c:c9:41:a9:f3:ba:eb:43:fc:94:34:47:52:2a: 1f:40:ae:a6:69:2d:d8:be:58:d8:61:04:27:e9:5d:38:c1:23: 8c:39:74:98:7d:5f:33:a2:a5:57:8e:78:1b:01:49:f3:b5:d3: f5:1e:93:51:ef:16:3a:66:df:12:c3:5c:25:89:dc:b9:dc:53: 43:b9:6d:fd:39:b0:bb:ce:35:8a:3e:3f:21:3e:2b:a9:7c:c0: ff:bc:6f:d8:8b:18:4f:37:5e:0f:7c:cd:ff:05:a6:55:e1:0c: 64:b9:d8:d1:f0:75:c7:e5:99:1b:af:97:2d:6e:36:11:d4:45: 29:0d:37:01:1a:14:f0:f1:01:e0:b2:4f:22:2e:4f:4f:81:19: 71:e9:24:49:12:60:eb:de:d6:5e:34:84:87:df:f1:de:20:6e: 40:68:0d:f5:fd:43:85:e5:a5:78:15:42:6b:4c:19:89:cb:01: 63:78:3e:50:bd:e1:77:d9:51:26:3e:0b:8a:a0:4f:07:92:ca: 54:75:76:65:49:c6:73:6a:8e:da:b3:5a:73:c8:c7:ba:45:97: 2b:59:82:08:4d:6c:c5:dd:a5:fa:c6:33:8a:50:89:b5:4e:30: 83:75:a7:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdBNzIxMTAvBgNVBAUTKDkwQTQ3RjNDNjU5QjM3MThGREM4MkQzMDA3QTlEMzQy NDlDQ0M4RjQwHhcNMjUwOTA5MDQ1MzA3WhcNMjUwOTE2MDQ1MzA3WjAYMRYwFAYD VQQDEw02OGJmYjJiMy01OTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/z/yuFdY0m2r2rKmIcOg136toWk1YYd3oKJS11x4ffFPflj9Jol4Woa39ER mMEcYoLeckUEXZwKa5uqmursMpl+175UJRhuzHz8m4HYRMPiVarLFE3o/8f3JAeq 3emPomj/aM6Q7jptxpSvhjmgccc4mSkixPCZ4QHJCzW7hHxQvRaXa00W76Mg+2eS MCvFHeFGJdaxQMyVi0NwlYVhBlpdGcv2me6PfVukrVcosck2Qw7eeUiIhwo2bPr9 Nf+WBf4hJTk0s35271QRH5hNHrESCpCp+rAyM+G3z6aG9hqf3mJV44OqE9oXf0xv V24lLgtTnD1RQCEbcahTe5KkDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfKsOZH sqfFe5AXcSS9IUFz5o6wMB8GA1UdIwQYMBaAFJCkfzxlmzcY/cgtMAep00JJzMj0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0E3Mi8yMkZEMTIxQURD RjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54ajl5QzB3QjZuVFFrbk15 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tLUl9QR1diTnhqOXlDMHdCNm5UUWtuTXlQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0E3Mi8yMkZEMTIxQURDRjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54 ajl5QzB3QjZuVFFrbk15UFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHhgV2/1kQBHDc6Mx0laap+gFcRtV/bMlBqfO660P8lDRHUiofQK6m aS3YvljYYQQn6V04wSOMOXSYfV8zoqVXjngbAUnztdP1HpNR7xY6Zt8Sw1wlidy5 3FNDuW39ObC7zjWKPj8hPiupfMD/vG/YixhPN14PfM3/BaZV4QxkudjR8HXH5Zkb r5ctbjYR1EUpDTcBGhTw8QHgsk8iLk9PgRlx6SRJEmDr3tZeNISH3/HeIG5AaA31 /UOF5aV4FUJrTBmJywFjeD5QveF32VEmPguKoE8HkspUdXZlScZzao7as1pzyMe6 RZcrWYIITWzF3aX6xjOKUIm1TjCDdaeg -----END CERTIFICATE-----Generated at Tue Sep 9 17:28:49 2025 by rpki-client